RANKS OF TWISTS OF ELLIPTIC CURVES 
AND HILBERT'S TENTH PROBLEM 
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Abstract. In this paper we investigate the 2-Selmer rank in famihes of qua- 
dratic twists of eUiptic curves over arbitrary number fields. We give sufficient 
conditions on an eUiptic curve so that it has twists of arbitrary 2-Selmer rank, 
and we give lower bounds for the number of twists (with bounded conduc- 
tor) that have a given 2-Selmer rank. As a consequence, under appropri- 
ate hypotheses we can find many twists with trivial Mordell-Weil group, and 
(assuming the Shafarevich-Tate conjecture) many others with infinite cyclic 
Mordell-Weil group. Using work of Poonen and Shlapentokh, it follows from 
our results that if the Shafarevich-Tate conjecture holds, then Hilbert's Tenth 
Problem has a negative answer over the ring of integers of every number field. 



1. Introduction and main results 

In this paper we investigate the 2-Selnier rank in famihes of quadratic twists 
of elhptic curves over arbitrary number fields. We give sufficient conditions on an 
elhptic curve so that it has twists of 2-Selmer rank r for every r > 0, and discuss 
other conditions under which the 2-Selmer ranks of all quadratic twists have the 
same parity. We also give lower bounds for the number of twists (with bounded 
conductor) that have a given 2-Selmer rank. 

Since the 2-Selmer rank is an upper bound for the Mordell-Weil rank, our results 
have consequences for the Mordell-Weil rank. Under appropriate hypotheses we can 
find many twists with trivial Mordell-Weil group, and (assuming the Shafarevich- 
Tate conjecture below) many others with infinite cyclic Mordell-Weil group. 

Here are two applications of our results. The first settles an open question 
mentioned to us by Poonen. 

Theorem 1.1. If K is a number field, then there is an elliptic curve E over K 
with E{K) = 0. 

The second application combines our results with work of Poonen and Shlapen- 
tokh. It relies on a weak version of the Shafarevich-Tate conjecture, Conjecture 
mT2(X) below. 

Theorem 1.2. Suppose Conjecture IIIT2(if ) holds for every number field K . Then 
for every number field K, Hilbert's Tenth Problem is undecidable (i.e., has a nega- 
tive answer) over the ring of integers of K. 

We now discuss our methods and results in more detail. If if is a number field 
and E is an elliptic curve over K, let Se\2{E/K) be the 2-Selmer group of E/K 
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(see ^for the definition) and 

d2{E/K) dimp^ Seh{E/K). 

Then T:smk{E{K)) < d2{E/K), so 

d2{E/K) = Q =^ rank(£;(i^)) = 0. 

If F/K is a. quadratic extension, let E^ denote the quadratic twist of E by F/K . 
We will allow the "trivial quadratic extension" F = K^in which case E^ = E. For 
X e R+ define 

Nr{E,X) [{quadratic F/K : d2{E^/K) = r and NK/Qf{F/K) < X}\ 

where f{F/K) denotes the finite part of the conductor of F/K. 

1.1. Controlling the Selmer rank. Not all elliptic curves have twists of every 
2-Selmer rank. For example, some elliptic curves have "constant 2-Selmer parity" , 
meaning that d2{E^ / K) = d2{E/K) (mod 2) for all quadratic extensions F/K. 
A theorem of T. Dokchitser and V. Dokchitser [DDI Theorem 1] (see Theorem 19.31 
below), combined with standard conjectures, predicts that E/K has constant 2- 
Selmer parity if and only if K is totally imaginary and E acquires everywhere good 
reduction over an abelian extension of K. See Sj9]for a discussion of the phenomenon 
of constant 2-Selmer parity, and some examples. 

We expect that constant parity and the existence of rational 2-torsion are the 
only obstructions to having twists of every 2-Selmer rank. We also expect that 
Nr{E,X) should grow like a positive constant times X, whenever it is nonzero. 
Namely, we expect the following. 

Conjecture 1.3. Suppose K is a number field and E is an elliptic curve over K. 

(i) Ifr > dim2£;(i^)[2] and r = d2(E / K) (mod 2), then Nr{E,X) > X. 

(ii) If K has a real embedding, or if E/K does not acquire everywhere good 
reduction over an abelian extension of K, then Nj.{E,X) ^ X for every 
r>dimF2 E{K)[2]. 

When = Q and E is — — x, Heath-Brown |HB) has shown that 
liuix^oo Nr{E, X)/X = Ur for every r > 2, with an explicit positive constant 
ar- Related results have been obtained by Swinnerton-Dyer |SD] when if = Q and 
E is an elliptic curve with all 2-torsion points rational. 

In the direction of Conjecture [L3l we have the following results. 

Theorem 1.4. Suppose K is a number field, E is an elliptic curve over K, r>Q, 
and E has a quadratic twist E' / K with d2{E' /K) ~ r. Then: 

(i) IfGa.\{K{E[2])/K) = S3, then Nr{E,X) > X/{\ogX)^/^. 

(ii) IfGal{K{E[2])/K) = Z/3Z, then Nr{E,X) > X/{logX)^/^. 

Note that Gal{K{E[2])/K) is isomorphic to 5*3 or Z/3Z if and only if E{K)[2] = 

0. 

When K — Q, a. version of Theorem 11.41 was proved by Chang in [Chll Theo- 
rem 4.10]. Also in the case K = Q, Chang has proved (slightly weaker) versions 
of Theorem [LTl and Corollarv 11.121 below, namely |Ch21 Theorem 1.1] and |Ch21 
Corollary 1.2], respectively. 

In the statements below, we will use the phrase "i? has many twists" with some 
property to indicate that the number of such twists, ordered by Nx/QfiF/K), is 
> X/{logX)" for some a G R. 
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Theorem 1.5. Suppose K is a number field, and E is an elliptic curve over K 
such that E{K)^] = 0. Suppose further that either K has a real embedding, or that 
E has multiplicative reduction at some prime of K . 

If r — 0, 1, or r < d2{E/K), then E has many quadratic twists E' / K with 
d2{E'/K) = r. 

Theorem 1.6. Suppose K is a number field, and E is an elliptic curve over K 
such that GsX{K {E^\) / K) = S^. Let Ae be the discriminant of some model of E, 
and suppose further that K has a place vq satisfying one of the following conditions: 
• Vq is real and {Ae)vo < 0; 

' Vq \ 2oo, E has multiplicative reduction at Vq, and ord^,;, (A^;) is odd. 
Then for every r > 0, E has many quadratic twists E' / K with d2{E' /K) = r. 

Theorem 1.7. Suppose K is a number field, and E is an elliptic curve over K 
such that E{K)[2] =0. If < r < d2{E/K) and r = d2{E/K) (mod 2), then E 
has many quadratic twists E' / K such that d2{E' /K) = r. 

Corollary 1.8. Suppose K is a number field, and E is an elliptic curve over K 
with constant 2-Selmer parity such that Ga\{K (E[2]) / K) = S^. Let j{E) be the 
j -invariant of E, and suppose further that j{E) ^ and K has an archimedean 
place V such that {j{E))y e R and (j{E))y < 1728. Then for every r = d2{E/K) 
(mod 2), E has many quadratic twists E' / K such that d2{E' / K) — r. 

For every number field there are elliptic curves E over K satisfying the 
hypotheses of Theorem 11.61 In fact, E can be taken to be the base change of an 
elliptic curve over Q (see Lemma [5. 4|) . 

Corollary 1.9. Suppose K is a number field. There are elliptic curves E over K 
such that for every r > 0, E has many twists E' / K with d2{E' / K) = r. 

1.2. Controlling the Mordell-Weil rank. Using the relation between d2{E/K) 
and ia.nk{E{K)) leads to the following corollaries. 

Corollary 1.10. Suppose K is a number field, and E is an elliptic curve over K 
such that E{K)^] = 0. Suppose further that either K has a real embedding, or that 
E has multiplicative reduction at some prime of K . Then E has many twists E' / K 
with E'{K) = 0. 

When A' = Q, Corollary [nUl was proved by Ono and Skinner ([OSl §1], [Ql 
Corollary 3] ) , using methods very different from ours (modularity and special values 
of i-functions) . 

Theorem 11.11 is an immediate consequence of the following corollary. 

Corollary 1.11. Suppose K is a number field. There are elliptic curves E over K 
such that E has many twists E' / K with E'{K) — 0. 

If E is an elliptic curve over a number field K, let III(_E/_ft') denote the Shafare- 
vich-Tate group of E over K (see Sj2]). A conjecture that is part of the folklore 
(usually called the Shafarevich-Tate Conjecture [Call p. 239, footnote (5)]) predicts 
that m{E/K) is finite. If the 2-primary subgroup m{E/K)[2°°] is finite, then the 
Cassels pairing shows that diuip^ U1{E / K)[2] is even. We record this 2-parity 
conjecture as follows. 

Conjecture IIIT2(iir). For every elliptic curve E/K , dimpa ^{ElK)[2] is even. 
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Corollary 1.12. Suppose K is a number field, and E is an elliptic curve over K 
such that E{K)^] = 0. Suppose further that either K has a real embedding, or that 
E has multiplicative reduction at some prime of K . If Conjecture IIIT2(-R') holds, 
then E has many quadratic twists with infinite cyclic Mordell- Weil group. 

Skorobogatov and Swinncrton-Dyer [SSDJ obtained results related to Corollary 
11.121 in the case where all the 2-torsion on E is rational over K. 

1.3. Controlling the rank over two fields simultaneously. Suppose L/K is a 
cyclic extension of prime degree of number fields. With care, we can simultaneously 
control the 2-Selmer rank of twists of E over K and over L, leading to the following 
result. 

Theorem 1.13. Suppose L/K is a cyclic extension of prime degree of number 
fields. Then there is an elliptic curve E over K with rank(i?(L)) = rank(i?(i4')). 

// Conjecture \IVT2{K) is true, then there is an elliptic curve E over K with 
Tank{E{L)) = Ta-nk{E{K)) = 1. 

Assuming standard conjectures, the second assertion of Theorem 11.131 can fail 
when L/K is not cyclic. See Remark 17.71 for more about this. 

By using the final assertion of Lemma 15.41 in the proof of Theorem I1.13[ we can 
take the elliptic curve E in Theorem ll.l3l to be a twist over K of an elliptic curve 
defined over Q. Similarly, in Corollaries ll.9l and ll.lll we can conclude that there are 
elliptic curves E/Q that have many quadratic twists E' / K having d2{E' / K) — r 
or E'{K) = 0, respectively. 

Poonen and Shlapentokh showed how to use Theorem 11.131 together with ideas 
from jP) Theorem 1 and Corollary 2] , |De| , and jShj to prove Theorem 11.21 about 
Hubert's Tenth Problem. In fact one can be more precise about how much of 
Conjecture IIIT2 is required; see Theorem 18. II 

A theorem of Eisentrager [e1 Theorem 7.1] gives the following corollary of 
Theorem [m 

Corollary 1.14. Suppose Conjecture 1IIT2{K) holds for every number field K. 
Then Hilbert 's Tenth Problem has a negative answer over every infinite ring A that 
is finitely generated over Z. 

1.4. Some remarks about the proofs. Our methods are different from the clas- 
sical 2-descent, and are more in the spirit of the work of Kolyvagin, especially 
as described in |MRlj . If F is a quadratic extension of K, the 2-Selmer group 
Seh{E^/K) is defined as a subgroup of H^{K,E^[2]) cut out by local conditions 
(see Definition 12. 3|) . The Gif-niodules E[2] and E-^[2] are canonically isomorphic, 
so we can view Sel2(i?''^/i^) C H^{K,E[2]) for every F. In other words, all the 
different 2-Selmer groups are subgroups of H-^{K,E[2]), cut out by different local 
conditions. Our method is to try to construct F so that the local conditions defin- 
ing SehiE/K) and SehiE^ / K) agree everywhere except at most one place, and 
to use that one place to vary the 2-Selmer rank in a controlled manner. 

For example, to prove Theorem II. 41 we find many different quadratic extensions 
F for which all of the local conditions defining SehiE/K) and SehiE^ / K) are the 
same, so in fact Seh{E^/K) = SehiE/K). 

For another example, suppose the hypotheses of Theorem 11.61 are satisfied. We 
will take F = Qi^/ir), where tt is a generator of a prime ideal p chosen using the Ce- 
botarev theorem, so that the local conditions defining SehiE/K) and Sel2(-E^/i^) 
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are the same for all places different from p. By choosing the prime p appropri- 
ately, we will also ensure that Sel2(£'^/i^) C SchiE / K) with codimension one, so 
d2iE^/K) = d2iE/K)-l. 

Similarly, we can choose a different F such that SehiE/K) C Seh{E^/K) with 
codimension one, so d2{E^ / K) — d2{E/K) + 1. Now Theorem 11.61 follows by 
induction. 

Theorems [L5l [TTTI and 11.131 are proved in the same general manner. 

A key tool in several of our arguments is a theorem of Kramer [Krl Theorem 1] 
that gives a formula for the parity of d2{E/K) + d2{E^ /K) in terms of local data. 
See Theorem 12 . 71 below. 

1.5. Layout of the paper. In the next section we define the 2-Selmer group and 
study the local subgroups that occur in the definition. In ^Sl we give a general 
result (Proposition 13.3] ) comparing the 2-Selmer ranks of quadratic twists, and lay 
the groundwork (Lemma 13. 5p for using the Cebotarev theorem to construct useful 
twists. 

Thcorcm ll.4l is proved in 2) Theorems II. 51 [TT51 and [T771 and Corollaries 1 1 . 8[ [TT51 
ll.lOi 11.111 and 11.121 are all proved in SJSI In fJS] we prove Theorem 11.131 in the case 
[L : K] = 2, and the rest of Theorem 11.131 is proved in SJT] Theorem 11.21 is proved 
in 35] In ^we discuss elliptic curves with constant 2-Selmer parity. 

1.6. Acknowledgements. The authors would like to thank Bjorn Poonen for ask- 
ing the questions that led to this work. They also thank Poonen and Alexandra 
Shlapcntokh for explaining how Theorem ll.131 implies Theorem ll.2| and for allowing 
us to describe their proof in SJH 



Fix for this section a number field K. 

Definition 2.1. Suppose E is an elliptic curve over K. For every place v of K, let 
Hf{Ky, E[2]) denote the image of the Kummer map 



(Note that Hf{Ky,E[2]) depends on E, not just on the Galois module E[2].) 

Lemma 2.2. (i) //i;|2oo then dimF^{Hl(Ky, E[2])) = dimp^ (£'(i4:t,)[2]). 

(ii) If V \ 2oo and E has good reduction at v, then 



with the isomorphism given by evaluating cocycles at the Frobenius auto- 
morphism Frobp . 



Proof. Suppose v \ 2oo, and let £ > 2 be the residue characteristic of v. Then 
E(Ky) is a commutative profinite group with a pro-£ subgroup of finite index, so 
Hl{K^,E[2]) = E{Ky)/2E{Ky) and E{Ky)[2] are (finite dimensional) Fa-vector 
spaces of the same dimension. 

If in addition E has good reduction at v, then (see for example [Ca2| ) 



2. Local conditions 



E{K,)/2E{Ky) 



H\Ky,E[2]). 



HliKy,E[2]) ^ ^[2]/(Frobp - 1)E[2] 



H}{Ky,E[2]) = H\K^'/K,E[2]) C 



{Kv,E[2]) 



and (ii) follows. 



□ 
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Definition 2.3. Suppose E is an elliptic curve over K. The 2-Selnier group 
Se\2{E/K) C H^{K,E[2]) is the (finite) F2-vector space defined by the exactness 
of the sequence 

{)^Seh{E/K)^HHK,E[2\)^®HHK,,E[2])/H}{K,,E[2\). 

V 

The Kummer map E{K)/2E{K) — > H^{K, E[2]) induces an exact sequence 

(1) — > E{K)/2E{K) — > SehiE/K) — > UI{E/K)[2] — > 

where III(i?/isr)[2] is the kernel of multiplication by 2 in the Shafarevich-Tate group 
of E/K. 

Recall that d2{E / K) dimp^ Seh{E/K). 

Remark 2.4. If E is an elliptic curve over K and E^ is a quadratic twist, then 
there is a natural identification of Galois modules i?[2] = £^^[2]. This allows us 
to view Seh{E / K),Seh[E'' / K) C H^[K,E[2]), defined by different sets of lo- 
cal conditions. By choosing F carefully, we can ensure that the local conditions 
H}{K.^,E[2\),Hl{K^,E^[2\) C H^{K.^,E[2\) coincide for all but at most one v, 
and then using global duality we will compare d2{E/K) and d2{E^ / K). 

Lemma 2.5. If F is a quadratic extension oj K , then 

d2{E/K) + d2{E^/K) EE d2{E/F)+dimF,{E{F)[2]) (mod 2). 

Proof. Let Se\2'=° {E/K) denote the 2-power Selmer group of E/K, the direct limit 
over n of the 2"-Selmer groups Se\2'^{E/K) defined analogously to SehiE/K) 
above. Using the Cassels pairing it is straightforward to show (see for example 
pR2l Proposition 2.1]) 

(2) corankz^(Sel2oo(S/is:)) = d2{E / K) + dimp^ E{K)[2] (mod 2). 
The natural map 

Selaoo {E/K) © Sela- {E^/K) Seh^ {E/F) 

has finite kernel and cokernel, so 

corankz,(Sel2oo(^/X)) +corankz,(Sel2oo(S^/X)) ^ corankz,(Sel2o= (S/F)). 

Combining this with ([2]), and observing that E{K)[2] = E'^ {K)[2], proves the 
congruence of the lemma. □ 

Fix for the rest of this section an elliptic curve E/K and a quadratic extension 
F/K. Recall that E^ is the twist of E by F/K. Let be the discriminant of 
some model of E. 

Definition 2.6. If w is a place of K, let E-^{Ky) C E{Ky) denote the image of the 
norm map E{Fw) — > E{Ky) for any choice of w above v (this is independent of the 
choice of w), and define 

5.,{E,F/K) := dxuiF,{E[Ky)/E^{Ky)). 

The following theorem of Kramer will play an important role in many of our 
proofs below. 

Theorem 2.7 (Kramer). We have 

d2{E^/K) EE d2iE/K) + J2W,F/K) (mod 2). 
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Proof. This is a consequence of [Krl Theorem 1]. Combining Theorems 1 and 2 of 
[Krj shows that 

mnk{E{F)) + dimF.,{m{E/F)[2]) = ^5^{E,F/K) (mod 2). 

V 

By ([1]), the left-hand side of this congruence is d2{E/F) — dimF2(£^(^)[2]), and by 
Lemma [231 this is congruent to d2{E/K) + d2{E^/K). □ 

Remark 2.8. A key step in Kramer's proof is the foUowing remarkable con- 
struction. There are alternating Cassels pairings on Se\2{E / K) and h^F on 
Se\2{E^ /K). Their sum is a new alternating pairing on Se\2{E/K) n Se\2{E^ /K), 
and Kramer shows ^Kn Theorem 2] that the kernel of hE + h^p is 'N p/KSel2{E/ F). 
Therefore 

dimF,((Sel2(£;//f) n SchiE^/K)) = dimF^{NpfKSe\2{E/F)) (mod 2). 

Lemma 2.9. Under the identification Hf{Ky,E[2]) = E{Ky)/2E{Ky), we have 

HliKy,E[2]) n Hl{K,,E^[2]) - E^{K,)/2E{K,). 

Proof. This is Kr, Proposition 7] or |MR2[ Proposition 5.2] (the proof given in 
[MR2] works even if p = 2, and even if v \ oo). □ 

Lemma 2.10 (Criteria for equality of local conditions after twist). // at least one 
of the following conditions (i)-(v) holds: 

(i) V splits in F/K, or 

(ii) w-|-2oo andE{K^)[2] = Q, or 

(iii) E has multiplicative reduction at v, F/K is unramified at v, and ordt,(A£;) 
is odd, or 

(iv) V is real and {Ae)v < 0, or 

(v) V is a prime where E has good reduction and v is unramified in F/K , 
then Hl{Ky,E[2]) = Hl{Ky,E^[2]) and Sy{E,F/K) = 0. 

Proof. By Lemma 12.91 we have 

H^iK,,E[2]) = Hl{K,,E^[2]) ^ E^{K,) = E{K,) ^ 6,{E,F/K) = 0. 
If V splits in F/K then E^iK.^) ^ E{K^). 

li v\2oo and E{K^)[2] = 0, then Hl{K^,E[2]) = Hl{Ky, E^[2]) = by Lemma 

If E has multiplicative reduction at v, F/K is unramified at v, and ordt,(A£;) is 
odd, then |Krl Propositions 1 and 2(a)] shows that Sv{E, F/K) = 0. 

If V is real and {Ae)v < 0, then E{Ky) is connected and Sv{E, F/K) = 0. 

If E has good reduction at v and v is unramified in F/K, then 5y{E, F/K) — Q 
by |Mazl Corollary 4.4]. This completes the proof. □ 

Lemma 2.11 (Criterion for transversality of local conditions after twist). Ifv \ 2oo, 
E has good reduction at v, and v is ramified in F/K, then 

Hl{K„E[2])nHl{K,,E^[2]) ^0, S{E, F/ K) ^ dimF,iEiK,)[2]). 

Proof. For such v, Maz, Corollary 4.6] or |MR2| Lemma 5.5] show that En{Kj,) = 
2E{Ky). Now the first assertion of the lemma follows from Lemma [2.9[ and the 
second from Lemma [2^ i). □ 
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3. Comparing Selmer groups 

We continue to fix a number field K, an elliptic curve E/K, and a quadratic 
extension F/K. 

Definition 3.1. If T is a finite set of places of K , let 

locT : H\K,E[2]) ®.,^tH\K.,,E[2]) 

denote the sum of the localization maps. Define strict and relaxed 2-Selmer groups 
5t C 5^ C H'^{K,E[2]) by the exactness of 

5^ H\K, E[2]) H\K,,E[2])/Hl{K,, E[2]), 

^ St ^ — ^ ®v<^tH\K,, E[2]). 

Then by definition St C SGh{E/K) C 5^, and we define 

Vt := locT(Sel2(-B/if)) C ®,eTHl{K,,E[2]). 

Proof. We have exact sequences 



Lemma 3.2. dimpa S^ — dimpa St — X^dgt dimpa Hf{Ky, E[2]). 



^ Sel2 {E/K) ®.,eT{H\K,,E[2])/Hl{Ky,E[2])) 

^ St ^ Sel2 (E/K) '"^ ^ e.er-ff/ (i^. , -B [2] ) . 

By Poitou-Tate global duality (see for example |Mil Theorem 1.4.10], |T11 Theorem 
3.1], or |Ru[ Theorem 1.7.3]), the images of the right-hand maps are orthogonal 
complements under the (nondegenerate) sum of the local Tate pairings, so their 
F2-dimensions sum to J^veT dimpa Hf{Kv, £'[2]). The lemma follows directly. □ 

Proposition 3.3. Suppose that all of the following places split in F / K : 

• all primes where E has additive reduction, 

• all V of multiplicative reduction such that ord^(A£;) is even, 

• all primes above 2, 

• all real places v with (Ae)v > 0, 

and suppose in addition that all v of multiplicative reduction such that ordu(A£;) is 
odd are unramified in F / K . 

Let T be the set of (finite) primes p of K such that F/K is ramified at p and 
E{Kf,)[2] ^ 0. Then 

d2{E^ /K) = d2{E/K) - dimpa Vt + d 

for some d satisfying 

0<d< diinF,i(SfeTHl{Kf,E[2])/VT), 

d = dimF^{®peTH^{Kp,E[2])/VT) (mod 2). 

Proof Let := locT(Sel2(£:^/if)) C (SperHliKf,, E[2]). 

By Lemma [mni Hl{Ky,E[2]) = H}{Ky,E^[2]) if u ^ T. Therefore we have 
St C 'iic\2{E^ / K) C S^ , and we have exact sequences 

^ St ^ Seh{E/K) Vt ^ 

St Seh{EP/K) V^ 0. 
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We deduce that 

(3) d2{E^ /K) ^ d2{E/K) + dimp^ - dimp^ Vt- 
Let 

By Lemma [2. Ill we have Sel2(i?/i^) n SehiE^ / K) — St, and by the remark above 
we also have Sel2(£;/i^) + SchiE'^/K) c . Hence 

(4) dimF2 Vt + dhriF^ = diinF^{Sel2{E/K)/ST) + diuiF^iSehiE^ /K)/St) 

< dimF.,{S'^ /St) = t, 

where the final equality holds by Lemma 13.21 

Recall the local norm index Sv{E,F/K) of Definition 12.61 By Lemma 12.101 
5y{E, F/K) = if V <^ T, and by Lemma [llTl 

Y,5y{E,F/K)^t, 

SO d2{E^/K) = d2{E/K) + t (mod 2) by Kramer's congruence (Theorem 12. 7p . 
Comparing this with ^ we see that 

(5) dimpa = t- dimF2 Vt = dimp^ (®pGT-ff/(A'p, -B[2])/1/t) (mod 2). 
By (jlj we have 

(6) < dimp, Vrf <t~ dimp, Vt = dimF,{®peTH^{Kp, E[2])/Vt). 

If we let d — dimpj Vrf, then the conclusion of the proposition follows from ([3]), 
©, and del). □ 

Corollary 3.4. Suppose E, F/K, and T are as in Provosition \3.S\ 

(i) IfdimF,{®peTHliKp,E[2])/VT) < I, then 

d2{E^/K) = d2{E/K) - 2dimF, Ft + EpeT dimp, H}{Kp,E[2]). 

(ii) IfE{Kp)[2] = for every peT, then d2{E'^/K) = d2{E/K). 

Proof. The first assertion follows directly from Proposition 13. 31 For (ii), note that 
T is empty in this case, so (ii) follows from (i). □ 

Let M ■.^K{E[2]). li c € H^K, E[2]) and cr S Gk, let c{a) € E[2]/{a ~ 1)E[2] 
denote the image of a under any cocycle representing c. This is well-defined. 

Lemma 3.5. Suppose Gal{M / K) = S3 and a G Gk. Suppose that G is a finite 
subgroup of H^(K, E[2]), and (j) : G ^ E[2]/{a — 1)£'[2] is a homomorphism. 

Then there is a j £ Gk such that 'jImk^^ = <^\mk^^ '^"'^ ^(7) = (/)(c) for all 
c&G. 

Proof Let F Gad{M/K) = Aut(i;[2]). Then H^{T,E[2]) = 0, so the restriction 
map 

H'{K,E[2])^Rom{GM,E[2]f 

is injective. 

Fix cocycles {ci, . . . , Ck} representing an F2-basis of G. Then ci, . . . ,Ck restrict 
to linearly independent homomorphisms ci, . . . ,Ck & Hom(G'M, ^^[2])^". 
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Let N C K he the (abelian) extension of AI fixed by nilcer(ci) C Gm- Put 
W := Gm/ Hi ker(ci) ~ Gal{N/M). Then W is an F2-vector space with an action 
of r, ci, . . . , Cfc are Hnearly independent in Hom(M^, £'[2])'", and 

(7) ci X ■■■ X dk -.W ^ E[2f 

is a F-equivariant injection. Thus W is isomorphic to a F-submodule of the semisim- 
ple module -E[2]'^, so W is also semisimple. But if U is an irreducible constituent 
of W, then U is also an irreducible constituent of E[2]'^, so U = E[2]. Therefore 
W = E[2Y for some j < k. But then j = dimpa Hom(Ty, £'[2])'" > k, so j ~ k and 
([7]) is an isomorphism. 

The group T acts trivially on Gal{{MK'''°nN)/M), but Gal(7V/Af) = E[2]'' 
has no nonzero quotients on which F acts trivially, so MK'^^ ON — M . 

Since (O is surjective and MK^^ D N = M, we can choose t ^ Gm such that 
Ci(r) = (f>{ci) — Ci{a) for 1 < i < k, and tImk^'^ = 1- Then Ciira) ~ Ciir) + 
r(ci((T)) = </'(ci) for every i. Since the Ci represent a basis of C, the proposition is 
satisfied with j :— ra. □ 

Lemma 3.6. Suppose E(K)[2] = 0, and ci,C2 are cocycles representing distinct 
nonzero elements of H^{K, E[2]). Then there is a ^ ^ Gk such that "^\mk'^^ — 1 
and ci (7), 02(7) are an F2-basis of E[2]. 

Proof Let F Gcd{M/K), so either T = S3 or T ^ Z/3Z. In either case E[2] is 
an irreducible F-module, and H^{T,E[2]) = 0, so the restriction map 

H\K,E[2]) ^ RomiGM,E[2]f 

is injective. Let ci, C2 be the distinct nonzero elements of Hom(GM, £'[2])'" obtained 
by restricting ci , C2 to Gm ■ 

For i = 1,2 let Ni be the fixed field of ker(5i). Then 5, : Gal{Ni/M) E[2] is 
nonzero and F-equivariant, so it must be an isomorphism. 

Let N = Ni D N2. Since Ci identifies Ga,l{Ni/N) with a F-stable subgroup of 
E[2], we either have iVi = N2 or iVi n iV2 = Af . 

If Ni — N2, then ci,C2 : Ga\{N/M) — > E[2] are different isomorphisms, so we 
can find t G Gal(iV/M) such that ci(r) and C2(t) are distinct and nonzero. 

If iVi n iV2 = M, then again we can find t S Gal(iViiV2/Af) such that ci(r) and 
62 (t) are distinct and nonzero. 

Since F acts trivially on Gal{{MK''^ D NiN2)/M), but Ga\{NiN2/M) ^ E[2] or 
E[2]'^ has no nonzero quotients on which F acts trivially, we have MK^^ r)NiN2 = 
M. Thus we can choose 7 G Ga/ such that jImk'^^ — 1 ^^^d 7|AriJV2 = This 7 
has the desired properties. □ 

4. Proof of Theorem 11.41 

In this section we will prove Theorem 11.41 Suppose K is a number field, iV is a 
finite abelian extension of K, and Af is another Galois extension of K. 

Fix a nonempty union of conjugacy classes S C Gal(Af/iir). If p is a prime of K 
unramified in AI/K, let Frobp(Af/iir) denote the Frobenius (conjugacy class) of p 
in Gal(Af/iir). Define a set of primes of K 



:= {p : p is unramified in NM/K and Frobp(A//£:) C S}. 
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and two sets of ideals A/'i C A/" of K 

A/" := {a : a is a squarefree product of primes in V}, 
J\fi -.^ {a e J\f : [a,N/K] = 1}, 
where [ • , N/ K] is the global Artin symbol. 
Lemma 4.1. There is a positive real constant C such that 

\{a e : N^VQa < X}\ = [C + 0(1))^^^^^^^^^^^^. 

Proof. The proof is a straightforward adaptation of a result of Serre |Sei Theoreme 
2.4], who proved this when K — N — 

Let G = Gsi\{N/K). If x : G ^ is a character, let 

/x(^) E x(a)Na-^ =11(1 + x(p)Np-^) 
where = xiV^i^/K]). Then standard methods show that 

where 

{0 if X is not the trivial character, 

\S\/[M:K] if X is trivial, 

and we write g{s) ^ h{s) for functions g, h defined on the half-plane !R(s) > 1 to 
mean that 17(5) — h{s) extends to a holomorphic function on 5R(s) > 1. It follows 
that 

E Na-^ = ^ E /x(^) = (-^ - 

with a function (7(5) that is holomorphic and nonzero on 5R(s) > 1. The lemma now 
follows from a variant of Ikehara's Tauberian Theorem [W, p. 322]. □ 

Now fix an elliptic curve E over K with E[2] = 0, and let A be the discriminant 
of an integral model of E. Let N — iir(8Aoo), the ray class field of K modulo 8A 
and all archimedean places, and let M := K{E[2]). Let P and A/'i be as defined 
above, with this N and M and with S the set of elements of order 3 in Ga\{M / K) . 
Since E{K)[2] = we have \S\ = 2. 

Proposition 4.2. Suppose a G A/'i. Then there is a quadratic extension F/K of 
conductor a such that d2{E^) = d2{E). 

Proof. Fix o G A/'i. Then o is principal, with a totally positive generator a = 1 
(mod 8A). Let F — K(y/a). Then all primes above 2, all primes of bad reduction, 
and all infinite places split in F/K. If p ramifies in F/K then p | a, so p G T'. Thus 
the Frobenius of p in Gal(Af/i^) has order 3, which shows that E{K^)[2] = 0. Now 
the proposition follows from Corollarv l3. 41^ 11). □ 

Proof of Theorem \1.4\ Recall that S is the set of elements of order 3 in Gal(Af /K), 
so 

151 _ f 1/3 if Gal{M/K) = 5*3, 
[M : K] "12/3 if Ga\iM/K) ^ Z/3Z. 
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Case 1: d2{E/K) = r. By Proposition 1121 

Nr{E,X) > |{aeM : NK/Qa< 

The estimate of Leiiima l4 . 1 1 for the right-hand side of this inequahty proves Theorem 
11.41 in this case. 

Case 2: d2{E/K) arbitrary. We have assumed that E has a twist E^ with 
d2{E^/K) = r. Every twist {E^y of E^ is also a twist of E, and 

f{F/K) I f{L/K)f{F'/K). 

so Nr{E,X) > Nr{E^,X/'NK/Qf{L/K)). Now Theorem O for E follows from 
Theorem II. 41 for E^, which is proved in Case 1. □ 

5. Twisting to lower and raise the Selmer rank 

In this section we will use Corollarv l3.4l and Lemmas 13.51 and 13.61 to prove The- 
orems 11.51 II. 6[ and 11.71 

(1) Lemmas l3.5l or [3^ will provide us with Galois automorphisms that evaluate 
Selmer cocycles in some useful way, 

(2) the Cebotarev Theorem will provide us with primes whose Frobenius au- 
tomorphisms are the Galois automorphisms we chose in (1), 

(3) Corollarv l3.4l will enable us to calculate d2{E^ / K), where F is a quadratic 
extension ramified at one of the primes chosen in (2). 

We use Proposition 15 . II below to prove Theorem II .61 Proposition 15.21 to prove The- 
orem [LTl and Proposition [5]3] to prove Theorem II .51 We also prove Corollaries ll.81 
[TTOl [TTTl andini 

Proposition 5.1. Suppose E/K satisfies the hypotheses of Theorem \1.6\ Suppose 
L/K is a quadratic extension (or L = K ) such that the place Vq of Theorem \1.6\ is 
unramified in L/K, L' / K is a cyclic extension of odd degree, and T, is a finite set 
of places of K . 

(i) There is a quadratic twist A of E such that d2{A/K) ~ d2{E/K) -\- 1 and 
d2{A^/K)^d2{E^/K) + l. 

(ii) If d2{E/K) > and d2{E^/K) > 0, then there is a quadratic twist A of 
E such that d2[A/K) = d2{E/K) - 1 and d2{A^/K) = d2{E^ / K) - 1. 

(iii) IfSehiE^/K) ^ Sel2(£;/iC) inside H^{K,E[2]), then there is a qua- 
dratic twist A of E such that d2{A/K) = d2{E/K) + 1 and d2{A^/K) = 
d2{E^/K) - 1. 

In all three cases we can take A — E^ , where the quadratic extension F/ K satisfies: 

• all places in ~ {vq} split in F/K , 

• F/K ramifies at exactly one prime p, and that prime satisfies p ^ S, p is 
inert m L' , and E{K^)[2] Z/2Z. 

Proof. Let A be the discriminant of (some integral model of) E. Let M := 
K{E\1]) — i4r(i?^[2]), so M is an ^s-extension of K containing the quadratic exten- 
sion K^sfK). Enlarge E if necessary so that it includes all infinite places, all primes 
above 2, and all primes where either E or E^ has bad reduction. Let vo\2he the 
distinguished place of Theorem 11.61 either real with A^^ < 0, or of multiplicative 
reduction with ord^g (A) odd. 
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Let be the (formal) product of all places in E — {vq}. Let K{8'Ci) denote the ray 
class field of K modulo 80, and let i4r[8c)] denote the maximal 2-power extension 
of K in K{8d). Note that K{VA)/K is ramified at Vq but K[8d]/K is not, and 
[L' : K] is odd, so the fields K[8d],L', M are linearly disjoint. Therefore we can fix 
an clement a G Gk such that 

• a\M e Gsil{M/K) ^ S3 has order 2, 

• crji' is a generator of Ga\{L' /K). 

It follows in particular that E[2]/{a - l)E[2] ^ Z/2Z. 

Let C = SehiE/K) + Seh{E^/K) C H^{K,E[2]), and suppose </> : C -5> 
E[2]/ {a — 1)£'[2] is a homomorphism. By Lemma [3751 we can find 7 € Gk such that 

• 7|a/l'_r-[8o] = o-j 

• 0(7) = (/)(c) for every c £ C. 

Let iV be a Galois extension of K containing ML'K[8d], large enough so that 
the restriction of C to TV is zero. (For example, one can take the compositum of 
L'K{8'0) with the fixed field of the intersection of the kernels of the restrictions of 
c G C ^ }iom{G M , E[2]) .) Let p be a prime of K not in S, whose Frobenius in 
Ga\{N/K) is the conjugacy class of 7. Since 7|k[8o] = clicfsi)] = 1; and [-^^(85) : 
iC[8D]] is odd, there is an odd positive integer h such that 'y^\K{S'o) — 1- Thus p'* is 
principal, with a generator tt = 1 (mod 85), positive at all real embeddings different 
from Vq. Let F = K{y/Tr). Then all places w S S — {vq} split in F, F/K is ramified 
at p and nowhere else, p is inert in L' / K because 7]^/ generates GaliL' / K), and 
E{Kp)[2] ^ because Frobpl^p] = '^\e[2] has order 2. 

We will apply Corollary 13. 4[ with T = {p}. Since E has good reduction at p, it 
follows from Lemma [2.21^11) that 



(8) Hl{K,,E[2]) = i?[2]/(Frobp - 1)E[2] - E[2]/{a - 1)E[2], 

and similarly with E replaced by i?^, so 

diniF, Hl{Kp,E[2]) = diniF, Hl{Kp,E^[2]) = 1. 

Further, the localization maps 

locT : SehiE/K),Sel2{E'^/K) H}{K^,E[2]) ^ E[2\/ {a - l)E[2] 

are given by evaluation of cocycles at Frobp — 7. Hence by our choice of 7, 
identifies 

locT(Sel2(^/i^)) = (l){Sch{E/K)), \ocT{Seh{E^ / K)) = d^{Seh{E^ / K)) . 
Thus by Corollarv l3.4r i) we conclude that 

^d2{E/K) + 1 if (j){Sch{E/K)) = 0, 



d2(i?V^) = 
d2iiE^)^/K)^d2{{E^f/K)^ 



d2{E/K) - 1 if ^{Seh{E/K)) + 0. 

' d2(E^lK) + 1 if 0(Sel2(S^/if)) - 0, 
d2{E^lK) - 1 if c^{Seh{E^ I K)) ^ 0. 



For assertion (i), let = 0. For (u), if d2{E/K) > and d2{E^ / K) > 0, then 
we can choose a (p that is nonzero on both Sel2{E / K) and Sel2(i?^/iir). For (iii), if 
SehiE^ / K) (/l Sel2(i?/-fsr), then we can choose a </) that is zero on Sel2(i?/-ftr) and 
nonzero on Sel2(i?^/iir). In all three cases, the proposition holds with A = E^ . □ 
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Proof of Theorem \1.6i Note that if E satisfies the hypotheses of Theoreni ll.61 then 
so does every quadratic twist of E. 

If r > d2{E/K), then applying Proposition IS.lf i) r — d2{E/K) times (with 
L ^ L' = K) shows that E has a twist E' with d2{E' / K) ~ r. 

If < r < d2{E/K) then applying Proposition 15 . 1 f ii) d2{E/K) — r times shows 
that E has a twist E' with d2{E'/K) = r. 

Now Theorem 11.41 shows that for every r > 0, E has many twists E' with 
d2{E'/K) = r. □ 

Proposition 5.2. Suppose E/K is an elliptic curve such that E{K)[2] — 0. // 
d2{E / K) > 1, then E has a quadratic twist E^ over K such that d2{E^ / K) = 
d2{E/K)-2. 

Proof. The proof is similar to that of Proposition 15 . 1 f ii) . Let M := K{E[2]), and 
let A be the discriminant of (some integral model of) E. Let i^(8Aoo) denote the 
ray class field of K modulo the product of 8A and all infinite places. 

Since d2{E/K) > 1, we can choose cocycles ci,C2 representing F2-independent 
elements of Se\2{E/K). By Lemma [3^ we can find 7 e Gk such that 

• 7|Mi4-(8Aoo) = 1, 

• 01(7), 02(7) are an F2-basis of i?[2]. 

Let iV be a Galois extension of K containing Mif (8Acxi), large enough so that 
the restriction of ?>e\2{E/K) to N is zero. Let p be a prime of K where E has good 
reduction, not dividing 2, whose Frobenius in Gdl{N/K) is the conjugacy class of 
7. Then p has a totally positive generator tt = 1 (mod 8A). Let F = K{^). 
Then all places v dividing 2Aoo split in F/ K , and p is the only prime that ramifies 
in F/K. 

We will apply Corollary 13.41 with T — {p}. Since E has good reduction at p, it 
follows from Lemma [2.2^1) that 



H}{K^,E[2]) = i;[2]/(Frobp - 1)£;[2] = E[2]/ {-f - l)E[2] = E[2]. 

The localization map Ioct : Se\2{E/K) — ^ H^{Kp,E[2]) is given by evaluation of 
cocycles at Frobp = 7, so by our choice of 7, the classes Ioct(ci) and 1oct(c2) 
generate Hl{Kp, £'[2]). In particular Ioct is surjective, so in the notation of Corol- 
lary [3]4] we have dimpj Vt = dimpj Hl{Kp,E[2]) = 2. Corollarv l3.4r i) now yields 
d2{E''/K) = d2{E/K)- 2, as desired. □ 

Proof of Theorem \1.7\ Suppose < r < d2{E/K). Applying Proposition 15.21 
{d2{E/K) — r)/2 times shows that E has a twist E' with d2{E'/K) — r, and 
then Theorem 11.41 shows that E has many such twists. □ 

Proof of Corollary \1.8[ Let k = Cl{j{E)) C K. Fix an elliptic curve Eq over k with 
j{Eo) = j{E). Since j{E) ^ 0, 1728, Eq is a quadratic twist of E over K. Thus 
[k{Eo[2]) : k] > [K{Ea[2]) : K] = [K{E[2]) : K], so Gal{k{Eo[2])/k) ^ S3. Also 

j{E) - 1728 = j{Eo) - 1728 = ce{Eof/AEo 

so {Aeo)v < at the real embedding v of k. Therefore Eo/k satisfies the hy- 
potheses of Theorem II. 6[ so Theorem 11.61 shows that d2{E^ /k) can be arbitrarily 
large as F varies through quadratic extensions of k. Since E{K)[2\ = 0, the map 
Sel2(£^,f /fc) — >• Sel2 (£'(f /if ) is injective, and so d2{E^ / K) can be arbitrarily large 
as F varies through quadratic extensions of K. Now the corollary follows from 
Theorem O □ 
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Proposition 5.3. Suppose E/K is an elliptic curve such that E{K)[2\ = 0, and 
either K has a real embedding, or E has multiplicative reduction at some prime of 
K . Then E has a quadratic twist E^ / K such that d2{E^ / K) ^ d2{E/K) (mod 2) 
and d2iE^/K) > d2{E / K) - 1. 

Proof. Let Af := K{E[2]), and let A be the discriminant of (some integral model 
of) E. Let X) be the (formal) product of A and all infinite places, let K{%X)) denote 
the ray class field of K modulo 80, and let i^[8c)] denote the maximal 2-power 
extension of K in ^(80). We have M n i4:[8Z)] = K{^/K). 

Let vq be the distinguished place, either real or of multiplicative reduction. Let 
X = {xy) be an idele of K defined by: 

• = 1 if w ^ Wo, 

• = —1 if wq is real, x^,^ is a unit at vq such that Kyg{^Jx^) is the 
unramified quadratic extension of K^^^ if vq is nonarchimedean. 

Let a = [y.,K[SmK] e Ga\{K[SmK) be the image of x under the global Artin 
map. We consider two cases. 

Case 1: cr(\/A) = \fK. In this case we can choose 7 G Gal(M/\ [80]/A') such that 
tIkIso] = and 7|m has order 3. 

Case 2: cr(\/A) = — VA- In this case Gal(M/A') = 6*3, and a is nontrivial on 
M n -ft'[8c)] = K{'\fK). By Lemma 1331 we can find 7 G Gk such that 7|a-[8o] = c, 
7|a/ has order 2, and 0(7) G (7— 1)£'[2] for every cocycle c representing an element 
of Seh{E/K). 

In either case, let p be a prime of K not dividing 2 A, whose Frobenius in 
Gsi\{M K[8X)\ / K) is 7. Then some odd power p'' is principal, with a generator 
TT such that TT e {K^Y if ^ I 2Aoo and v 7^ wq, -f^folv^) = C if vo is real, and 
K.u„{^/^) is the unramified quadratic extension of K^q if wo is nonarchimedean. 

Let F = K{y/Tr), and recall the local norm index Sv{E,F/K) of Definition 12.61 
All places v \ 2Acxi different from vq split in F/K, so by Lemma r2.101 Sy{E, F/K) — 
and H}{Ky,E[2]) = H} {K.^ , E^ [2]) \i v ^ vq, p. It follows (using Kramer's 
congruence Theorem 12.71 for (|9])) that 

(9) d2{E^/K) = d2{E/K) + 5,,„{E,F/K) + Sp{E,F/K) (mod 2), 
and 

(10) ker[Sel2(£;/i^) H}{K,,,E[2]) ® H}{Kf,E[2])\ C SehiE^/K). 

Consider the Hilbert symbol (A, 7r)„, which is 1 if A is a norm from [F (E) K^)^ 
to , and —1 if not. Then (A,7r)„ — 1 li v ^ vi^, p, and J|^(A, 7r)i, = 1, so 
(A, 7r)i,o — (A, 7r)p. By IKr| Proposition 6] if vq is real, and by |Kr| Propositions 1, 
2] if Vq is multiplicative, we have 



5y„{E,F/K) = 



1 if (A, 7r)„„ = 1 
if (A,7r)„„ =-1. 



By |Kr[ Proposition 3], and using that 7 acts nontrivially on E[2\ in both Case 1 
and Case 2, we have 



Sp{E,F/K) 



if(A,7r)p==l 

1 if (A,7r)p = -1. 
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Thus 6v„{E,F/K) + 6p{E,F/K) ^ I, so ^ shows that d2{E^/K) and d2{E/K) 
have opposite parity. 

In Case 1, £:[2]/(7 - 1)£:[2] = 0, so H}{Kf,E[2\) = by LemmaOJii)- In Case 
2, the restriction map Seh{E/K) Hl{Kf,E[2]) ^ E[2]/{"f~ 1)E[2] is given by 
evaluating cocycles at 7, so by our choice of 7 this image is zero. In both cases, 
dimF^Hl{Ky„,E[2]) < 2, so by ^ we have d2iE^/K) > d2{E/K) - 2. This 
completes the proof. □ 

Proof of Theorem \1.5\ Let E^ be a twist of E as in Proposition 15.31 Theorem 11.51 
follows directly from Theorem 11.71 applied to E and to E^ . □ 

Lemma 5.4. Suppose p is a prime of K not dividing 2. Then there is an elliptic 
curve E / K with all of the following properties: 

(i) E is semistable at all primes, 

(ii) E has multiplicative reduction at p and ordp(A£;) = 1, 

(iii) Ga\{KiE[2])/K) = 83. 

If in addition the rational prime p below p is unramified in the Galois closure of 
K/Q, then E can be taken to be the base change of an elliptic curve over Q. 

Proof. Let Et be the elliptic curve y'^ + y — x'^ — x"^ + t over K{t). Then 

^•(^-) = - (4t + l)(lL+ll) ' A(^;.)^-(4t + l)(108t+ll), c,iE,)^W. 

It follows from |S1[ Proposition VII. 5.1] that for every t E Ok, Et has semistable 
reduction at all primes of K. 

Let r] € Ok he such that ordp(477 + 1) = 1, and let g{t) := 77 + {Arj + 
Then for every t G Ok we have oidp{4:g{t) + 1) = 1. The splitting field of ft{x) :— 
x^ — x"^ + g{t) + 1/4 over K{t) has Galois group 5*3, since ft is irreducible and 
its discriminant —{Ag{t) + l){108g{t) + 11)/16 is not a square. Hence by Hilbert's 
Irreducibility Theorem, there is an integer € Ok such that the splitting field of 
fto (x) over K is an S'3-extension. 

Let E be the elliptic curve Egi^t^^y Then K{E[1]) is the splitting field of fto{x), 
so Gal{K{E[2])/K) S3, and 

A{E) = -{4g{to) + l)(108.9(to) + 11) = -(Mto) + l)(27(4g(io) + 1) - 16) 

Thus E satisfies (i), (ii), and (iii). 

Let K' be the Galois closure of K/Q, and p the rational prime below p, and 
suppose p is unramified in K' /Q. We can apply the lemma with p and Q in place 
of p and K to produce a semistable elliptic curve E/Q such that ordp(A£;) = 1 
and Gal(Q(£;[2])/Q) ^ 83- 

Then E/K satisfies (i) and (ii). Further, Q(i?[2]) O K' is a. Galois extension of 
Q that does not contain Qi^/ Ae) (since the latter is ramified at p). Therefore 
CliE[2]) OK = Q, and so Gal{K{E[2])/K) = Gal(Q(i;[2])/Q) = 5*3. □ 

Proof of Corollary \1.9[ By Lemma 15.41 we can find an elliptic curve E over K and 
a prime p \ 2 such that E has multiplicative reduction at p, ordp(A£;) — 1, and 
Gal{K{E[2])/K) = S3. By Theorems ll.6l and ll.4[ this E has many quadratic twists 
with da (£^7-?^) = f, for every r > 0. □ 

Lemma 5.5. Suppose E is an elliptic curve over K. Then for all but finitely many 
quadratic twists E' of E, E'{K) has no odd-order torsion. 
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Proof. This is proved in jGMi Proposition 1] when K ~ Q; we adapt the proof given 
there. By Merel's Uniform Boundedness Theorem for torsion on elHptic curves [Mej . 
the set 

{primes p : E^{K)[p] =^ for some quadratic extension F/K} 

is finite. On the other hand, if p is odd and pp : Gk — >■ Aut(i?[p]) = GL2(Fp) de- 
notes the mod-p representation attached to E, then there are at most two characters 
X of Gk such that Pp® x contains a copy of the trivial representation. Therefore 
for fixed odd p, the set 

{F/K quadratic : E^ {K)[p\ ^ 0} 
has order at most 2. This completes the proof. □ 

Proof oj Corollary \ 1. 1 (A By Theorems 11.51 and 11.41 E has many quadratic twists 
E' with d2{E'/K) = 0, and hence Tank{E'{K)) = by (P). Since E{K)[2] = 0, 
none of these twists have rational 2-torsion, and by Lemma l5.5l only finitely many 
of these twists have odd-order torsion. This proves the corollary. □ 

Proof of Corollary \1.11\ ( and Theorem By Lemma f5.4l there is an elliptic curve 
E over K with multiplicative reduction at a prime p f 2, and with i?[2] — 0. Now 
the Corollarv 11.111 follows from CoroUarv ll.lOl □ 

Proof of Corollary \1.12[ By Theorems 11.51 and 11.41 E has many quadratic twists 
E' with d2{E'/K) = 1. Since E{K)[2] = 0, it follows from (P) that either 
Teink{E'{K)) = 1 or dinip^ U1{E'/K)[2] = 1. But Conjecture niTaCivT) says that 
diiRF^ in{E' /K)[2] is even, so rank(£"(X)) = 1. By Lemma EH all but finitely 
many of these twists have E'{K)tors = 0, and this proves the corollary. □ 

6. Proof of Theorem 11.131 when [L : K] = 2 

Proposition 6.1. Suppose L/K is a quadratic extension. Then there is an elliptic 
curve E/K such that Ga\{K{E[2])/K) ^ S3 and d2[E/K) + d2{E^/K) is odd. 

Proof. We thank the referee for pointing out the following simple proof of this 
proposition. 

Fix a prime p f 6 that remains prime in L/K. Using Lemma |5.4[ fix an elliptic 
curve E over K with Gal{K {E[2]) / K) = S3, with multiplicative reduction at p, 
and with ordp(A£;) — 1. Fix also a quadratic extension M/ K that is ramified at p, 
and split at all of the following places: all primes different from p where E has bad 
reduction, all primes above 2, all infinite places, and all places ramified in L/K . 

Recall the local norm index 6y{E, L/K) of Definition 12.61 By Kramer's congru- 
ence (Theorem 12. 7p we have 

(11) d2{E/L) + d2{E^'^ /L) = ^5^{E,LM/L) (mod 2), 

summing over all places w of L. We will show that the sum in (fTTj) is odd. 

If w divides 2oo, or it; 7^ p is a prime where E has bad reduction, then w splits 
in LM/L, so Lemma [2.10( 1) shows that 6w{E, LM/ L) = 0. If w is a prime where 
E has good reduction and w is unramified in LM/L, then 5w{E,LM / L) = by 
Lemma I2.10( v) . 

Suppose w \ 2oo, E has good reduction at w, and w ramifies in LM/L. Let 
V denote the prime of K below w. If v splits in L/K into two places then 
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S^,{E, LM/L) = 5n,'{E, LM/L) so the contribution 5^,{E, LM/L) + 5n,'{E, LM/L) 
in (fTT|) is even. If v is inert in L/K^ then cither E{Ky)[2\ = 0, in which case 
E{F^)[2] = as well, or E{Ky)[2] ^ 0, in which case E{F^)[2] = E[2]. In either 
case Proposition 12.111 shows that d{E, LAI/ L) = dim.F^{E{Fiu)[2]) is even. 
We conclude now from (fTTj) that 

d2{E/L) + d2iE^'^/L) = SpiE,LM/L) (mod 2). 

Since Lp is the unramified quadratic extension of Kp, E has split multiplicative 
reduction over Lp. It follows from |Kr[ Proposition 1] that Sp{E,LM/L) = 1. 

Therefore d2{E/L) + d2{E^'^ / L) is odd. Replacing E by E^ if necessary, we 
may suppose that d2{E/L) is odd. Since E{K)[2] = 0, we have E{L)[2] = as 
weh, so d2{E/L) = d2{E/K) + d2{E^/K) (mod 2) by Lemma [231 and the proof 
is complete. □ 

Theorem 6.2. Suppose L/K is a quadratic extension of number fields. There 
is an elliptic curve E over K such that d2{E / K) = and d2{E^ / K) = 1. In 
particular rank(£'^(A')) = rank(_E^(L)), and if Conjecture IIIT2(iir) holds then 
Tank{E^{K)) = Tank{E^{L)) = 1. 

Proof. Fix an elliptic curve A over K satisfying the conclusion of Proposition 16.11 
Ga\{K{A[2])/K) = S3 and d2{A/K),d2{A^/K) have opposite parity. 

Now apply Proposition IS.lf ii) repeatedly (with L' = K), twisting A until we 
produce a twist B with either d2{B/K) = or d2{B^/K) = 0. Switching B and 
B^ if necessary, we may suppose that d2{B/K) = 0. 

Note that d2{B/K) and d2{B^ / K) stiU have opposite parity, so d2{B^/K) > 1. 
If d2{B^/K) = 1 we stop. If d2{B^/K) > 1 we apply Proposition lS.lf iii) and then 
Proposition IS.lT ii). to obtain at twist C with d2{C / K) — and d2{C^ / K) = 
d2{B^ / K) — 2. Continuing in this way we eventually obtain a twist E with 
d2{E/K) = and d2{E^ / K) = 1. 

We have T:wk{E{K)) = 0, so 

rank(£;^(L)) = rank(£;(i^)) + T:&-ak{E^ {K)) = Tank{E^{K)), 
and if Conjecture mT2(i^) holds then rank{E^{K)) = 1. □ 

7. Two-descents over cyclic extensions of odd prime degree 

Fix for this section a number field K, and a cyclic extension L/K of prime 
degree p > 2. Let G — Ga\{L / K) . If i? is a commutative ring, let R[G] denote the 
augmentation ideal in the group ring R[G]. 

Since \G\ is odd, the group ring F2[G] is an etale F2-algebra. Concretely, if we 
fix a generator of G we have G-isomorphisms 

(12) F2[G] - F2[X]/(Xf - 1) ^ F2 ® (n. F2[X]/n{X)) 

where tt runs through the irreducible factors of X^^^ + • • • + 1 in F2[X], and the 
chosen generator of G acts on F2[X] as multiplication by X. The submodule of 
F2[G] corresponding to the summand F2 in (IT2|) is F2[G]*^, and the submodule of 
F2[G] corresponding to F2[X]/7r(X) is the augmentation ideal F2[G]°. Thus 
([T2|) corresponds to the decomposition (independent of choice of generator of G) 

F2[G] = F2[G]'^ © F2[G]" = F2 © (©feenk) 
where is the set of simple submodules of F2 [G] on which G acts nontrivially. 
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If B is an F2[G]-module, then B ®-p2[G] F2 = B'^ , and we define 

This gives a canonical decomposition B ~ B'^ ® B^™ . 

Suppose now that E is an elhptic curve over K. The 2-Selmer group Sel2(i?/i) 
has a natural action of F2[G]. Since \G\ is odd, it is straightforward to check that 
Seh{E/L)^ = Seh{E/K), so 

SehiE/L) = Sel2(£;/i^) © Sel2(£;/L)"°"'. 

For k e 51 we define a non-negative integer 

dt{E/L) diniF2(Sel2(£;/i) ^jp^fG] k)/dimF2 K 

the multiplicity of k in the F2[G]-module Sel2(i?/i). 

Remark 7.1. Our proof of Theorem II . 1 31 for L/K goes as follows. We show that 
if E satisfies the hypotheses of Theorem 11.61 then: 

(1) There is a twist E' of E over K such that dk{E' /L) = for some k (see 
Proposition 17. 4p . 

(2) For every r > 0, there is a twist E' of E over K such that d2{E' / K) = r 
and Seh{E' / L)''™ = Seh{E/Ly'™ (see Proposition [L3. In other words, 
we can twist to get whatever size we want for the "old part" of Selmer, 
while keeping the "new part" of Selmer unchanged. 

Replacing E' by a quadratic twist as necessary, by (1) we may assume dt{E/L) — 
for some k. Then by (2) we may assume that both d2{E/K) = 1 and dt{E/L) = 0. 
Since dk{E/L) = for some k, we have raBk{E{L)) = raiik.{E{K)) (see Lemma 
[721), and if Conjecture mT2(ii') holds, then Tank{E{K)) = 1. 

Lemma 7.2. Suppose E is an elliptic curve over K . If dk{E/L) = for some 
ken, then rank(£;(L)) = rank(£'(i^)). 

Proof. Since G is cyclic of prime order, it has only 2 irreducible rational represen- 
tations, namely Q (the trivial representation) and the augmentation ideal Q[G]'^. 
Therefore we have an isomorphism of G-modules 

E{L)(g, Q-Q'' X (Q[G]")^ 

for some a, 6 > 0. Then E{L) has a submodule isomorphic to (Z[G]*')'', so E{L)^Z2 
has a direct summand isomorphic to (Z2[G] )'', so E{L) (g) F2 has a submodule 
isomorphic to (F2[G] )^, which implies that dk{E/L) > b. Since dt{E/L) = we 
have 6 = 0, and so rank(£'(L)) = rank(£^(i^)) = a. □ 

We will need the following G-equivariant version of Proposition 13.31 

Proposition 7.3. Suppose F/K is a quadratic extension and the hypotheses of 
Proposition lS. 3\ are satisfied. LetT be the set of primes of K where F/K is ramified, 
and let be the set of primes of L above T. 

(i) If the localization map Ioct^ : Sel2(£;/L)"™ ^ (©qjeTii^fH^qJ, -^[2]))"°^ 
is surjective, then there is an exact sequence 

^ Sel2(£;^/£)"™ Sel2(-B/i)"™ (®q5eT^iIfi(i<p, £;[2]))"™ ^ 0. 

(ii) Suppose that for every prime p £ T, p is inert in L/K and E(Kp)[2] 7^ 0. 
Then Scl2(i;^/£)"™ = Seh {E / LY'"'^ . 
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Proof. The proof is identical to that of Proposition 13.31 using that the functor 
B i-> ijn™ exact on F2[G]-modules. As in the proof of Proposition 13. 3) we have 
(G-equi variant) exact sequences 

m ^Sel2(i;/i)"™ ^ (e<peT,i^fHi'p,-B[2]))-- 
(IIl ^ Sel2(i;^/£)"™ ^ (®q3eT^i/i(Lq3,i;^[2]))"°^ 

either of which can be taken as the definition of 5^°^. The proof of Proposition 
13.31 showed that if loc^^ is surjective, then the right-hand map of (ITil) is zero, and 
then p3)) is the exact sequence of (i). 

Suppose p G T is inert in L/K. Let Frobp G Gal{K^'' / Kp) be the Frobenius of 
p, so Frob-p = Frobp is the Frobenius of the prime *P above p. Since p G T, the 
hypotheses of Proposition l575] require that E has good reduction at p, so by Lemma 
I2.2f ii) there is a commutative diagram with horizontal isomorphisms 

Hl{L^,E[2]) — ^ £;[2]/(Frobq} - 1)£;[2] 

(15) Res 

Hl{Kp,E[2]) S[2]/(Frobp - 1)£;[2]. 

If E{Kp)[2] 7^ 0, then Frobp acts on E[2] as an element of order 1 or 2, so 
Frob(:j3|£;[2] = Frobp |^[2] and the groups on the right have the same order. The 
left-hand vertical map is injective since [Lrp : Kp] is odd. Therefore the left- 
hand map is an isomorphism, so G acts trivially on iJf (irp, £^[2]), and we have 
i?i(Lq5,i;[2])"<=^ = 0. 

If every p G T has these properties, then (©q}gTfff/(-^qj, -Ep]))"™ = 0, so (ii) 
follows from (i). □ 

Proposition 7.4. Suppose E is an elliptic curve over K satisfying the hypotheses 
of Theorem \1.6\ If d\{E/ L) > for every k G il, then there is a quadratic twist E' 
of E over K such that 

dtiE'/L) = dt{E/L) - 1 

for every k G $7. 

Proof. Let A be the discriminant of (some integral model of) E. Let M :— K{E[2]), 
so M is an 5'3-extension of K containing the quadratic extension K{\/^). Let S 
be the set of all infinite places and all primes where E has bad reduction. 

Let 3 be the (formal) product of all places in E — {vq}, where f 2 is the 
distinguished place of Theorem II. 6[ either real with A^^ < 0, or of multiplicative 
reduction with ordi,(,(A) odd. Let K{8'i)) denote the ray class field of K modulo 
80, and let if [80] denote the maximal 2-power extension of K in K{8d). Note that 
K{^^K)/K is ramified at vq, but LK[8d]/K is unramified at vq, so AI D LK[8d] = 
K{\/A)r\LK[8d] — K. Fix an element a G Gk, trivial on LK[8X)\, whose projection 
to Gal{MLK[8l}\/LK[8Vi]) Gal{M/K) ^ 53 has order 2. Since a has order 2 on 
M, we have E[2]/{a - 1)£;[2] 9^ Z/2Z. 

Since dkiE/L) > 1 for every k G rj, it follows that Sel2(£'/L)"°^ has a submod- 
ule free of rank one over F2[G]". Let G C SehiE/LY"''^ be such a submodule, 
fix an isomorphism ry : G F2[G]°, and define (j) : C E[2]/{a - l)E[2] hy 
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<f){c) = fi{ri{c))x, where /i : F2[G] F2 is projection onto the first coefficient, i.e, 
^g9) — s-iid a: is the nonzero element of E[2]/{a — 1)E[2]. 
By Lemma 13.51 we can find 7 € Gk such that 

• 1\lMK[8T)] = cr, 

• 0(7) = (j){c) for all c e C. 

Let be a Galois extension of K containing MLK[8t}], large enough so that the 
restriction of c to is zero. Let p be a prime of K where E has good reduction, not 
dividing 2, unramified in L/K, whose Frobenius in G'a\{N/K) is in the conjugacy 
class of 7. Since 7|k[8o] — o'|k[8d] — li and [^^^(80) : i^[8c)]] is odd, there is an 
odd positive integer h such that ^^\K{d,-t>) = 1- Therefore is principal, with a 
generator tt = 1 (mod 80), positive at all real embeddings different from vq. Let 
F = K{^/^^). Then all places v dividing 2 and all places in E — {vq} split in F, and 
F/K is ramified only at p. Let E' be the quadratic twist of E by F. We will show 
that E' has the desired properties. 

We will apply Proposition l7.3l Let T = {p}, and Tl the set of primes of L above 
p. For every *p e T^, 

Hl{L<^,E[2]) ^ H\L'^/L<^,E[2]) - £;[2]/(Frobq3 - l)E[2] = E[2]/ {a - l)E[2] 

is a one-dimensional F2-vector space. Fix a prime of N above p whose Frobenius 
in Ga\{N / K) is equal to 7, and let *Po be the corresponding prime of L. Then 
Tl = {^0 : T e G}, and FToh<:^r-jp{N/K) = t-/t-^. The locahzation map 

locT^ : Seh{E/L) ^ ®^eT^Hl{L^,E[2]) ^ F2[G] ®z {E[2]/{a - 1)E[2\) 

is given on c e G C Sel2(i;/i)"™ by 

loCTi (c) — ^ T ® c{tJT^^) — ^ T (K) C"^ (7) = ^ T 0(0"^ ) 
T r T 

= ^ r (8) /i(T"^77(c))a:; = ^ t (81 fr{'n{c))x = 77(c) (g) a; 

r r 

where : F2[G] — ?> F2 is the map /r(X] ^gff) — ^r- Since the image of t] is F2[G]°, 
this shows that the localization map G — >■ (©fpgTi-fff (iqj, -£'[2]))"'^^ is surjective. 
Now Proposition [LHi) shows that Seh{E^ / LY""^ sits inside Sel2(i;/L)"™ with 
cokernel containing a copy F2[G]°, so dk{E^ / L) < dk{E/L) for every k g fi. □ 

Proposition 7.5. Suppose E is an elliptic curve over K satisfying the hypotheses 
of Theorem ] 1.6\ Then: 

(i) There is a quadratic twist E' of E / K such that d2{E' / K) = d2{E / K) + 1 
and Seh{E' / LY"'" = Seh{E/LY™. 

(ii) IfSe\2{E/K) 7^ 0, then there is a quadratic twist E' of E/K such that 
d2{E'/K) = d2{E/K) - 1 and Seh{E'/LY™ = Sel2(i;/i)"™. 

Proof. Let E be the set of all places v \ 2oo of K and all v of bad reduction, and 
let Vq be the distinguished place of Theorem 11.61 either real with A^^ < 0, or of 
multiplicative reduction with ord^„(A) odd. By Proposition 15. 1[ for (i) or (ii) we 
can find a quadratic extension F/K satisfying 

. d2{E^/K) = d2{E/K) + 1 in (i), d2{E^/K) = d2{E/K) - 1 in (ii), 

• all tl G E — {vq} split in F/K, and vq is unramified in F/K , 

• F/K is ramified at exactly one prime p, p | 2, p is inert in L/K, and 
E{Kp)[2] ^ Z/2Z. 



22 



B. MAZUR AND K. RUBIN 



By Proposition [L3i;ii) applied with T = {p}, Seh{E^ / LY"''^ = Seh{E/Ly"''^ in 
both cases. □ 

Corollary 7.6. Suppose E/K satisfies the hypotheses of Theorem \1.6\ and r > 0. 
Then there is a twist E' of E such that 

d2{E'/K) = r, rank(i;'(L)) = T:m\k(E' {K)) . 

Proof. Using Proposition 17.41 repeatedly, we can find a twist E" of E such that 
dk{E" /L) — for at least one k. Then applying Proposition !?. 51 repeatedly, we can 
find another twist E' of E such that dt,{E'/L) = and d2{E'/K) = r. Now the 
corollary follows from Lemma [7.21 □ 

Proof of Theorem\rM het p = [L : K]. lip ^2, Theorem OS] is Theorem O so 
we may assume that p is odd. By Lemma 15.41 we can find an elliptic curve E over 
K and a prime p | 2 such that E has multiplicative reduction at p, ordp(A£;) — 1, 
and G&\(K{E[2])/K) = S'3. Then E satisfies the hypotheses of TheoremHH so by 
CoroUarv 17.61 E has a twist with the desired properties. □ 

Remark 7.7. Assuming standard conjectures, there are noncyclic extensions L/ K 
for which the second part of Theorem 11.131 fails to hold. For example, suppose Fi 
and F2 are distinct quadratic extensions of K such that every prime that ramifies in 
Fi/K splits in F2/K , and vice- versa. Let L = F1F2. It is not difficult to show that 
for every elliptic curve E over K, the global root number of E over L is +1. Thus 
(conjecturally) every elliptic curve E over K has even rank over L, so (conjecturally) 
there is no elliptic curve E over K with rank(£'(L)) = rank(i?(_fir)) = 1. 

8. Proof of Theorem 11.21 

In this section we prove the following slightly stronger version of Theorem 11.21 
The proof of Theorem lS . 1 1 from Theoreni ll.l31 is due to Bjorn Poonen and Alexandra 
Shlapentokh. We thank them for allowing us to include their ideas here. 

Theorem 8.1. Suppose K is a number field and Conjecture IIIT2(£) holds for 
all subfields L of the Galois closure of K/C^. Then Hilbert's Tenth Problem has a 
negative answer over the ring of integers of K . 

Definition 8.2. Suppose that i? is a commutative ring with identity. Following 
[DH IDej , we say that a subset _D of i? is diophantine over R if there is a finite set 
of polynomials /i, • • • , /fe G R[X, Yi, . . . , Ym] for some m such that for every x G R, 

X E D <^=> for 1 < i < fc there are . . . , ym,i G R 

such that fi{x, yi^, . . . , ym.,i) = for 1 < i < fc. 

Lemma 8.3 ( [PL] ) . Suppose K G L are number fields. Then: 

(i) If Di,D2 C Ol are diophantine over Ol, then so is Did D2. 

(ii) If D d Ok is diophantine over Ok, and Ok is diophantine overOL, then 
D is diophantine over Ol • 

(iii) // Z is diophantine overO^, then Z is diophantine over Ok- 

Proof. This is Proposition 1(a), (c), and (d) of |DLj . □ 

Corollary 8.4. Suppose L/K is a cyclic extension of number fields. If Conjecture 
IIIT2(i^) holds for all subfields F <Z L, then Ok is diophantine over Ol. 
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Proof. We have K — Kq C Ki C • • • C Kn — L, where each Ki+i/Ki is cychc of 
prime degree. If Conjecture \ilT2{Ki) holds for every i, then by Theorem II . 1 31 for 
every i there is an elhptic curve E/Ki such that rank(i?(i4'i)) = rSiak{E{Ki+i)) = 1. 
By Theorem 1 of [P , it fohows that is diophantine over OKi+i ■ Now the 
corollary follows from Lemma l8.3r ii) by induction. □ 

Proof of Theorem \8.1\ Fix a number field and let L be the Galois closure of 
/f/Q. For every g e Gal(L/Q), let L<9> denote the fixed field of g in L. Then 
L/L^'^^ is cyclic, so ©^(g) is diophantine over Ol by Corollary 18.41 But then by 
Lemma [H3Ii), ^gO]^(g) = 0^^'^^^*^' = Z is diophantine over Ol, so by Lemma 
I8.3f iii). Z is diophantine over Ok- Now the theorem follows from Matiyasevich's 
Theorem [Mat] . □ 

9. Elliptic curves with constant parity 

In this section we discuss briefly the phenomenon of "constant parity" . 

Definition 9.1. Suppose E is an elliptic curve defined over a number field K. 
We will say that E/K has constant 2-Selmer parity if the parity of d2{E^ / K) 
is constant as F ranges over all quadratic extensions of K, i.e., if d-ziE^ /K) = 
d2{E/K) (mod 2) for all quadratic extensions F/K. 

Similarly, we can say that E has constant Mordell-Weil parity if the parity of 
ra,nk{E^ (K)) is independent of the quadratic extension F/K, and E has constant 
analytic parity if the global root number of E^ /K is independent of F. Standard 
conjectures imply that all three notions of constant parity are the same. 

Example 9.2. Suppose E has complex multiplication by an imaginary quadratic 
field k C K. Then E has constant (even) 2-Selmer parity, constant (even) Mordell- 
Weil parity, and constant (even) analytic parity. 

The question of constant analytic parity was studied by T. Dokchitser and V. 
Dokchitser in |DDj . They proved the following. 

Theorem 9.3 (Theorem I of |DD| ). An elliptic curve E over a number field K 
has constant analytic parity if and only if K is totally imaginary and E acquires 
good reduction over an abelian extension of K . 

The following example from |DD| shows that constant parity can be odd. 

Example 9.4. Suppose K is totally imaginary, E/K has good reduction every- 
where, and [K : Q]/2 is odd. Then E/K has constant odd analytic parity (see jRol 
Theorem 2(i) and Proposition 8(i)]). 

This applies in particular to the elliptic curve E : y'^ -\- xy = + ~ 2x — 7 
(labelled 121C1 in Cremona's tables) and K the splitting field of x^ — II. 

From now on we will only consider constant 2-Selmer parity. The following 
theorem will be proved at the end of this section. 

Theorem 9.5. If E/K has constant 2-Selmer parity, then K is totally imaginary 
and E has additive reduction at all primes. 

Definition 9.6. Suppose E is an elliptic curve defined over a local field K. If F 
is a quadratic extension of K {or F — K), define 

d{E, F/K) = dimp^ E{K)/'Nf/kE{F). 
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We will say that E/K has constant local parity if 6{E, F/K) is even for every 
quadratic extension F/K. 

If D e ivr^/(i^^)2, we will say that E/K has D -parity if 

S{E,F/K) is even <^ D e Np/nF''. 

Note that if I? is a square in i^T^, then E/K has D-parity if and only if it has 
constant local parity. 

Lemma 9.7. Suppose E is an elliptic curve defined over a local field K, and 
A^; G K^ / [K^Y discriminant. 

(i) If V is nonarchimedean with residue characteristic different from 2, and E 
has good reduction, then E has Ap-parity. 

(ii) // K is nonarchimedean and E has multiplicative reduction, then E does 
not have Ae -parity. 

(iii) If K = R, then E does not have Ae -parity. 

Proof. Assertions (i), (ii), and (iii) are [Mazl Corollary 4.4] and [Krl Proposition 
3].jKr| Propositions 1 and 2], and |Kr| Proposition 6], respectively. □ 

For the rest of this section, fix an elliptic curve E defined over a number field 
K , and let A^; be the discriminant of some model of E. 

Theorem 9.8. (i) If E/K^ has constant local parity for every place v of K, 

then E/K has constant 2-Selmer parity. 
(ii) E/K has constant 2- Selmer parity if and only if E/K^ has A. e -parity for 
every v. 

Proof. Suppose is a quadratic extension of K. Kramer's congruence (Theorem 
says 

(16) d2{E^ /K) = d2{E/K)+^5{E,FjK,) (mod 2) 

V 

where F^ is the completion of F at some place above v. Assertion (i) follows directly 
from this. 

Now suppose E/Ky has A£;-parity for every v. Then, if r is the nontrivial 
automorphism of Gsi\{F / K) , 

where [ • ,Fy/Ky\ is the local Artin symbol. The global reciprocity law shows that 
]\^[AE,Fy/Ky\ = 1, so Y.V ^(^^ Fv/Ky) is even and it follows from ^ that E/K 
has constant 2-Selmer parity. 

Finally, suppose that for some vq, E/Ky^ does not have A^-parity. By Lemma 
I9.7( i). E/Ky has A^-parity for almost all v. Fix a quadratic extension F/K such 
that 

• t'(^'^^o/k.o) =r-[AE,FyjKy,l 

• every v ^ vq where E/Ky does not have A^-parity splits in F/K. 
Then T^(E,FJK^) ^ [AE,Fy/Ky] for every v ^ vq, so 

r^.^iE,E^/K^}=r-Y[[AE,Fy/Ky]^r, 

V 

SO by (fT6)l . d2{E/K) and d2{E^ / K) have opposite parity. □ 
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Proof of Theorem \9.5l Theorem [93] follows directly from Theorem l9.8( ii) and Lem- 
ma [93^ii,iii). □ 

Corollary 9.9. If Ae is a square, then E/K has constant 2-Selmer parity if and 
only if E/ K.^ has constant local parity for every v . 

Proof. This is immediate from Theorem I9.8f ii). □ 
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